Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
File:                     9I-TynzhxFjLZG83ocligAjtlek.mft (raw, json)
Hash identifier:          EcenPGF26cIBDjNcdzhw62YDHOwn4Y3Ih0lnMnI3vPk=
Subject key identifier:   82:8E:8C:D0:D9:F2:5D:46:0A:DE:BF:B8:14:F2:61:8D:D8:7B:E7:8F
Authority key identifier: F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9
Certificate issuer:       /CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
Certificate serial:       019F8EA2ED38626CEFDB401CD14259C482B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
Manifest number:          7A
Signing time:             Thu 23 Jul 2026 11:01:09 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:09 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:09 +0000
Files and hashes:         1: 14IQa4YJx07aw3R2c8Wa0alO5tE.asa (hash: p3I3ibR75QpSLRLyKUWYy3n3ScI7ed7lUSMpaavT+mE=)
                          2: 9I-TynzhxFjLZG83ocligAjtlek.crl (hash: sn9YAmoI8BWT8fb/qb+nX/tFqfIPIPb9WUmbRpnsTu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:ed:38:62:6c:ef:db:40:1c:d1:42:59:c4:82:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f48f93ca7ce1c458cb646f37a1c9628008ed95e9
        Validity
            Not Before: Jul 23 11:01:09 2026 GMT
            Not After : Jul 24 11:01:09 2026 GMT
        Subject: CN=828e8cd0d9f25d460adebfb814f2618dd87be78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a3:a1:16:36:c0:45:55:85:3b:71:ff:84:b5:
                    50:7a:69:67:55:b5:d4:d8:b4:68:a5:5c:6a:8b:c1:
                    7e:1d:2a:ab:9a:bb:40:7b:46:c3:ec:f6:be:4b:b5:
                    73:95:fa:41:0b:1d:9d:8d:80:d1:36:73:87:6a:43:
                    17:8b:25:41:ba:13:b0:27:bd:fb:66:dd:8d:dd:11:
                    33:2c:12:70:43:d9:ab:38:fb:10:5f:13:6e:4f:d7:
                    e1:54:55:f0:63:41:bb:72:8d:10:c8:a0:54:a4:2f:
                    e8:52:64:88:d3:bf:ac:9f:95:a6:b2:36:a4:db:28:
                    26:4c:61:67:7b:92:1a:59:ed:4c:d3:c3:d9:57:3b:
                    7a:62:42:d1:3f:6f:99:90:8b:5e:32:10:f4:c5:26:
                    d2:48:3c:c1:f3:1e:0f:f8:3c:e2:ae:a5:9c:c4:4d:
                    60:ae:e9:e5:9b:e8:45:81:7a:0c:40:fc:4d:6d:de:
                    e2:be:14:ed:79:c0:3b:69:3c:0f:c7:a7:ae:1f:d3:
                    bd:89:fc:8a:dc:3d:cc:ef:d0:bd:28:9c:30:dd:c2:
                    2d:b9:02:df:7b:6f:f6:fa:08:56:03:99:d5:98:b7:
                    2f:6a:da:19:ff:5a:5a:20:e0:3d:41:71:b7:54:d1:
                    32:45:10:81:9b:96:12:1f:b3:20:59:2a:41:09:32:
                    31:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:8E:8C:D0:D9:F2:5D:46:0A:DE:BF:B8:14:F2:61:8D:D8:7B:E7:8F
            X509v3 Authority Key Identifier:
                keyid:F4:8F:93:CA:7C:E1:C4:58:CB:64:6F:37:A1:C9:62:80:08:ED:95:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9I-TynzhxFjLZG83ocligAjtlek.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/68e3a8-d154-49fc-aca1-d2fc7f1cbc23/1/9I-TynzhxFjLZG83ocligAjtlek.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:f6:7f:14:f2:ab:e3:77:07:53:67:36:7f:39:85:1c:63:5f:
         21:f0:6e:19:57:f3:4d:0d:4b:fb:08:81:41:e6:63:ff:7f:17:
         a3:e0:79:15:14:73:4c:d2:ef:1a:64:70:76:b8:c4:b3:60:5e:
         a3:dd:33:73:7d:52:b5:cf:a3:ec:a6:be:6c:c0:02:32:35:1a:
         7c:c5:45:db:a9:68:e8:72:3b:2c:6f:38:8c:6d:47:c0:2c:76:
         b9:f4:39:d8:d0:96:7d:8c:b9:1b:4b:82:86:cf:58:05:b1:75:
         22:95:30:f8:fd:ad:47:4b:6c:3a:3d:32:a4:07:1f:d2:b0:ce:
         f4:13:a4:e5:ff:58:29:0a:ae:d2:d6:74:d5:cb:7c:df:29:80:
         a6:1f:d9:a1:68:54:4f:39:e7:95:16:c8:2e:f0:3f:8b:5b:26:
         17:ba:92:2f:ba:96:c7:79:a2:f5:c3:d8:0a:96:22:7d:2d:69:
         10:9f:56:04:84:dc:d2:6d:1a:bf:a8:bc:1f:69:c3:4b:4e:cf:
         84:db:03:40:25:2b:2e:ee:f1:98:b3:81:5a:0d:05:39:b4:0f:
         34:9b:3d:b4:ae:78:79:68:a0:80:c2:77:70:68:da:e3:f3:8e:
         03:c6:30:7c:f4:f0:91:03:a5:76:e4:16:eb:90:71:39:34:ef:
         ab:a8:05:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Oou04Ymzv20Ac0UJZxIK1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0OGY5M2NhN2NlMWM0NThjYjY0NmYzN2ExYzk2MjgwMDhl
ZDk1ZTkwHhcNMjYwNzIzMTEwMTA5WhcNMjYwNzI0MTEwMTA5WjAzMTEwLwYDVQQD
Eyg4MjhlOGNkMGQ5ZjI1ZDQ2MGFkZWJmYjgxNGYyNjE4ZGQ4N2JlNzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0qOhFjbARVWFO3H/hLVQemlnVbXU
2LRopVxqi8F+HSqrmrtAe0bD7Pa+S7VzlfpBCx2djYDRNnOHakMXiyVBuhOwJ737
Zt2N3REzLBJwQ9mrOPsQXxNuT9fhVFXwY0G7co0QyKBUpC/oUmSI07+sn5Wmsjak
2ygmTGFne5IaWe1M08PZVzt6YkLRP2+ZkIteMhD0xSbSSDzB8x4P+DzirqWcxE1g
runlm+hFgXoMQPxNbd7ivhTtecA7aTwPx6euH9O9ifyK3D3M79C9KJww3cItuQLf
e2/2+ghWA5nVmLcvatoZ/1paIOA9QXG3VNEyRRCBm5YSH7MgWSpBCTIxRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIKOjNDZ8l1GCt6/uBTyYY3Ye+ePMB8GA1UdIwQY
MBaAFPSPk8p84cRYy2RvN6HJYoAI7ZXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUktVHluemh4RmpMWkc4M29jbGlnQWp0bGVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82OGUzYTgtZDE1NC00OWZjLWFjYTEt
ZDJmYzdmMWNiYzIzLzEvOUktVHluemh4RmpMWkc4M29jbGlnQWp0bGVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82OGUzYTgtZDE1NC00OWZjLWFjYTEtZDJmYzdmMWNiYzIz
LzEvOUktVHluemh4RmpMWkc4M29jbGlnQWp0bGVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPZ/FPKr
43cHU2c2fzmFHGNfIfBuGVfzTQ1L+wiBQeZj/38Xo+B5FRRzTNLvGmRwdrjEs2Be
o90zc31Stc+j7Ka+bMACMjUafMVF26lo6HI7LG84jG1HwCx2ufQ52NCWfYy5G0uC
hs9YBbF1IpUw+P2tR0tsOj0ypAcf0rDO9BOk5f9YKQqu0tZ01ct83ymAph/ZoWhU
TznnlRbILvA/i1smF7qSL7qWx3mi9cPYCpYifS1pEJ9WBITc0m0av6i8H2nDS07P
hNsDQCUrLu7xmLOBWg0FObQPNJs9tK54eWiggMJ3cGja4/OOA8YwfPTwkQOlduQW
65BxOTTvq6gF4Q==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:04:03 2026 by rpki-client